slice the raw log file